CVE-2020-12356

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

Out-of-bounds read in subsystem in Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially enable information disclosure via local access.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Nov 12, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-123576.7Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privileCVE-2020-123584.4Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via locCVE-2020-123596.8Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable esCVE-2020-12367.8A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnCVE-2020-123607.8Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilegCVE-2020-123615.5Use after free in some Intel(R) Graphics Drivers before version 15.33.51.5146 may allow an authenticated user to potentially enable denial oCVE-2020-123627.8Integer overflow in the firmware for some Intel(R) Graphics Drivers for Windows * before version 26.20.100.7212 and before Linux kernel versCVE-2020-123635.5Improper input validation in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before Linux kernel version 5.5 mCVE-2020-123645.5Null pointer reference in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before version Linux kernel version CVE-2020-123655.5Untrusted pointer dereference in some Intel(R) Graphics Drivers before versions 15.33.51.5146, 15.45.32.5145, 15.36.39.5144 and 15.40.46.514CVE-2020-123667.8Insufficient input validation in some Intel(R) Graphics Drivers before version 27.20.100.8587 may allow a privileged user to potentially enaCVE-2020-123677.8Integer overflow in some Intel(R) Graphics Drivers before version 26.20.100.8476 may allow a privileged user to potentially enable an escala
CVE-2020-12356: Medium severity, CVSS 4.4 | Vulnix